Vulnerability Bulletins

CVE-2025-22215

   
Affected software VMWARE
 
VMware Aria Automation contains a server-side request forgery (SSRF) vulnerability. A malicious actor with "Organization Member" access to Aria Automation may exploit this vulnerability enumerate internal services running on the host/network.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-22215